resolve #19 with new auth method