auth stuff
auth pages done