add auth code workflow