make token storage use auth object again