don't change what's in auth_token