After following the steps for authentication, I managed to obtain the requested token from the logged in user, but how should I use it? should I replace the api key with it, for example

I want to add an authenticated user's movie to the favorite, where should I put this request token?