working auth plugin
deleted unused