auth, save to db, display