something is up with the auth hash but WHAT