fix create token and token authentification