changed login response to show auth_token instead of authentication_token