Add a callback to invalidate an auth code