auth token might not be defined