minor testing review
finish auth