more auth things