fixed reload to not re-login.  Optional auth-token now holds