small changes in auth.py