ahh, 'auth' is an internal method