pagoda box db auth