Security fix. Adds oldAuthToken field.