fixed auth_token method call