Add TODO for auth_code method