actually use stored auth token