playing with header file auth stuff