move setup to Auth, build Auth class