authcode validation