renamed to magic-auth