auth finally being broadly implemented