use ensure_authentication_token instead of reset_authentication_token