provide external access to requestor auth_token