add generating auth token