changed auth instructions