update auth token status