auth.js - update http code