only use AuthToke for valid machineID - h/t Schuyler