work on new auth code