Idea to put the auth into