adding auth, totally gonna break it