auth by script