More work on auth 0