updated auth checks