publish works, auth doesn't