authentication fixes related to new api