more changes to auth