some auth enhancements