make auth codes work with local users