auth request
better naming, cleaner code