provider responsible for parsing auth token response