changed token name to auth_token