added /auth/status endpoint