make the auth_token readable/writable