make it a little clearer for how to auth