final auth