tweaks to helloworld and auth