auth + bs3.0