feature: $auth.setToken()