wow, not easy to handle auth page...