better handling of auth backend.