update auth mechanism to support auth on native applications