more auth work