set token response property in authentication