allow user to setup their auth token without editing .profile