updates to auth stuff