in the middle of adding the auth functionality