login method now returns auth token