updated auth-flow example