use login.id as the auth token

...instead of the login.token which is deprecated