now saving auth_token to localstorage