working on auth some more