updated auth with real code