more auth work
stuff