authentication fixes