css, better auth flow