handle JSON responses from auth server