add working auth