small xola auth method