updated for new auth token steps