add iv to auth token, lookup by username