changed auth.js for better persona checking