auth work-in-progress