more mock auth fleshing out