making auth