lolnope; auth token is now saved in user session variable