moved all auth. stuff to the separate module