auth working fully