start of work on auth server