disable auth token in MVP