auth works