big push: auth logic stuff