added dummy controller and basic authentication via token