conditions for  &  in auth