laying out auth example