modify auth flow