auth + changes