fixed auth call back signature