updates to auth regarding aaf