request code during authentication