hacky auth implementation