amended callback route for authentication