work on auth protocol -- in progress