added in GET to token auth