passing along auth token