ebay - more on the token/auth process