refactored auth response