fix auth tokens