get initial auth working