removed email auth step