auth from plist