implemented and un-implemented signed auth. it breaks things