parse auth token for login, use constants for return values