auth stuff, key stuff