use a different module to handle auth