auth code now returns { authtoken : <t> , authtime : <sec> } as the payload