final bit of local auth