protocol auth