need to clean up auth yet