small tweak to the auth code