change auth_token to token in serialize from session block