authToken automatically reloads