allow more options for auth token