hmm im curious about this auth string being passed to the iframe, any of yee figure it out ?