add auth by token