further auth development