change how auth works
auth improved