working on auth primarily