rework auth to export a lower level auth parser