finish auth