updated auth strategies