auth improvements