note refactor to use AuthHelper