correct location impl (always create new), sitehistory integration, more
consistent authentication code