major auth fixes, redesign, prepare for new features