* auth code optimization