auth now works