change in global.asax authentication