keeping auth on refresh complete along with a rewrite of auth