change auth mechanism