refactor auth; replace DES with AES