auth outside of Manager