the detailed version of comments were intended to be for auth, but placed in the wrong place (resolver/main).