auth and timer