tweak authentication