attach auth to win.