some basic drain auth