broke authentication out into a new file