minor changes to authentication