really use auth_context prepared