fixed auth bug..its more secure now