change the way /back authenticates