signalr & token authentication