Auth branch

tests all pass