make auth tokens persistent