ajax call for auth and sources