properly show error
fix auth checking, should display nice message when user is incorrect