basic persona based auth works