auth that almost makes sense