just return auth token if set already
user methods