remove token authentication