custom pkg for api-auth