removed plaintext auth stuff