update auth token only onve a week