cleaned up how auth works with create/open and just loading a url