auth finished but buggy