auth finished up