api auth updated