fix mvc authentication the right way, update nuget packages