extra fields for auth response