auth is its own module