most auth stuff working