views as classes; fake auth works