auth changes, almost working