fix mobile to use auth token