added soft auth method