closer to working auth