removed auth hardcode