auth functionality provided