auth sorta works?