hybrid auth working, database table, and so on