update frontend
update auth.php
hmac from get instead of header
searches using actual api call