auth and firewall