add support for server auth using a token