set token to authenticated