final implementation of auth with dummy api call