auth api updated