now can receive the authid/token from client