still problem with auth