worked on auth