fixed auth_token bug introduced inadvertently