Auth scenario almost working