move auth to tasks