adding auth stuff