dev: auth rethink