some progress in ok auth