update auth.js