add callback to auth_token