some minor fixes and documentation of the changes in auth