added auth token creation