borked auth but sign up works