use auth_token to fetch attributes CDB-1845