update auth callback