clearer message about where to get auth token