gives auth