added an authentication token in the response so a user can use that to authenticate each subsequent request