truly wripped out the auth