modify auth before deploy