get aux_token on auth