updating auth flow