auth work properly