Add auth_token to app controller