auth from factory to service