added auth token request + tests