add auth code, not work