made auth fixes