manage client auth token for student requests