do not reset the auth token on every request