got token auth working