better auth checking.