done with simple persistent auth