separate auth concerns