finish TokenAuthentication