minor updates in authentication