fixed wdydfun pen auth to go via secure server