moved auth stuff