fix token auth in the proxy