options for auth endpoint