add the real auth script