#424 playing with auth