fixed authentication and account creation