got auth working correctly, a little more confident