where does the ```responseFromAuthEndpoint``` come from?
So the application developer writes this to store the access key, right ?