messing about with auth