change auth method and make a guidelines for api answer