fix the former exposure of the auth token and create a new branch therefore