auth loop doc