semi working auth