work on dynamic auth