looking into non-firebase auth