more updates to the auth code

for #4