update for auth token