started exploring various options for auth tokens