auth finallllly works