third party risk fixes, authentication fixes