provide tokenURL and other options with authenticate method