authentication improvements