authentication rework, misc updates