removed todo from auth manager