wrote auth.py