fixes for form_authentication