working auth
sign in working too