fixes to new auth