some tweaks, things working except authentication