forward the auth token