change create_token to use conf auth token length