cleaned up auth to match API changes in service, also added some notes