moving auth around, experimenting