more updates to AuthToken class