auth works now