modify auth handler