moved auth to run async on initialisation
fix broken call sequence