fixes for authentication