add endpoint to display auth token