fix auth token