building up auth