update api: there is no "noauth" return value, it must be "badauth"