extended auth example with dao access