fixed auth, no bypass, final gui update-needs functions form Tim