auth almost done