more auth crap