fixed auth stuff