added more auth stuff