made auth key references more generic
replaced g.user with g.auth_record