updated auth response format