allow appearance_lookup to act as auth token