finish token auth