make the names of auth-related functions more general and not mention auth except in docstrings