fixed: return auth response after approving client