auth changes from tldr