fix auth_token closes #3,#4