working Auth w/database