Fixed auth flow