test fetching auth token