move 140 char limit auth to backend