move auth into options