moving auth to its own seperate tool