fix the authcode to be much harder to crack