authentication overhaul