changed permissions
removed unused var
fixed auth