minor authentication tweaks from solution