finished auth hw #2