start of move auth to provider