updated to have auth code in place