trying to fix auth by manually setting token in security context