auth captive