remove using moh for now
update auth function