small changes to authentication