remove comment about typo in API
revert to separate HTTP code for the authentication step