auth flow changes