moved auth stuff to auth.js and hopefully everything will be hunky dory