updated auth system