change authentication flow
