test with auth code