returns just the token required for authentication