changed auth strategy