sending auth code