missed one call to setTokenAuth