this is where we should handle validate_auth_token_reply