triggers, auth