reset/auth handling