made auth parameter more flexible, removed username.