modified auth procedure