auth strategy complete