better parsing of auth code