changed stuff regarding auth