added auth_token to login