change auth flow