trying some new auth stuff