auth token fix