more prog on auth