should be auth provider instead of provider?