renamed authentication to auth