auth implemented completely, status=broken