authentication works. my brain is dead