passing auth token