auth stuff redone...