draft auth