some progress in Auth