seperate auth