tweak authenication