auth stuff, readme