verifies Auth