make app.py take auth methods