more auth setup