updated to remove auth logic moved to auth plugin