my.getAuthCode (for BE only)