refine service auth