adding location to auth_code for moves