auth-token bug fix