work on Auth 2.0 / BEO