structuring auth stuff
auth tokens