auth & send