refactoring auth files into their own folder