completed token based authentication