finished simple auth token example