made auth_token and refresh_token required