now got rid of auth race condition