auth partially working