fixed auth-flow example