Only generate auth token if not set