auth through separate page