fix token auth issue