added exceptions to auth (fixed #12)