working the authentication thing now