moved auth to service instead of factory