made auth related methods private