extendable auth methods