proper auth is back