download token auth