expanded list of authentication todos