trying to get the auth token right