a few more fixes to authentication, and layout