working auth hopefully