a lot of auth work