fix auth token assign