update auth and corresponding tests