full auth system speced out