[server] slightly modified auth