messing about with auth2