a whole bunch of fixes for authentication, misbehaving servers, and preview view