auth 2 variants needed