fixed bug with token auth