add support for auth/step API call