got rid of extra ? when building the auth query