matching auth scheme + adding auth math UNTESTED