add an auth callback