feat(0.5.0): add auth code flow