completed server side auth