implement auth actions