working auth, with validation.