adding auth token