fix some token authenticate bug between client app