auth improvements
cascade option for hasMany, fix _owner joining