tweaks to auth