fully reconsidered on how to split auth