more work: set_auth_callback, get_auth_callback