server-auth works