check in before trying auth changes
work on reuse token