auth added, bug fixes