finish the auth