added auth token extension