adding auth_token to form