auth bug fixes