group auth method works