more auth digging