change authentication response format