updated auth window sequence