update auth handling