finally working auth with friend