(broken) auth component implementation