request interceptor to send auth token in every async request