Correctly return the auth token