more auth changes