changes to resources paths and auth