improved auth signing... easier to debug
update to pass test