auth overhaul