added back auth.js