expose auth token