working local auth