auth shenanigans