get_by_auth_token stuff