Move up to .auth?