Update auth.js

removed requirement for access token & access secret