fixes to auth if running by IP