more auth fun