Exposes user favorites if auth_token present