minor fixes to auth.