progress on auth api