issues crypto-signed authentication token