minor auth fixes