make the auth working