It is hard, I agree. I think I would have pointed to aq good explanation of what an auth token is and how it works, if there is such a thing.