layout auth token