auth_status is a GET not POST now -- it requests server state not changes it