make auth work