simple get /auth to verify auth token