working towards adding auth endpoint