docs for client-side authentication
success/failure handlers
fis url in taglib
success/failure handlers
fix updateToken for detached user