first shot at an auth system