followed auth tutorial with success