also authtoken user association