Auth close to working, requires a complete string of details, not just the token