improve auth