done staff, making auth