work on authentication - fix silly