auth instructions