adjusted token auth for phones controller