adding tokens auth as default behaviour