added custome auth (not working yet)