auth working, needs refactor