use base-auth library