huge changes in auth process