small hotfixes
add auth to the mix