the token status was added in /auth/status