moved auth.py to auxiliary