fixed things so we're more in line with how Android apps do authentication