add a _ from private attibutes
fix the token authentication