break out helpers, start auth work