auth should actually work... I think