auth somewhat working