minor fixes, begun auth