auth token handler added