changed auth process and api