auth kind of working