called out use of 1.0 auth API