update to auth string