auth work correctly