rest of the mod-auth-token path changes