authToken is not necessary