finish up auth