server-side auth additions