red auth uses key
changed the html
updated todos