auth fixes to ma