working on dyn. auth