added basic authentication for API access
placed API key authentication in HTTP request header
altered tokens to handle access
included dishes and restaurants routes and logic
implemented filter for user tokens
verified application and login credentials