isolate auth helpers