smaller auth method