auth.html added