add reauth option