Auth security changes