return authData so we can grab both the access-token and refresh-token

This way we're able to query moves api without the user having to re-authenticate, if we store the refresh token in a db.