working auth skeleton