a lot of auth updates