improving auth