still hacking away at the authentication