receiving auth token on login