change authentication_token to auth_token