auth code is working