auth token from subscribe request in first notification