some details regarding auth