auth handling change