fix up authentication