added auth_token handling to the user interface