fixes for auth