start work on auth system