duplicate innner authToken variable was shadowing the real one