added auth stuff