json authentication with auth_key