still going, looking for auth