refactor a bit default auth from token