moved call to auth