modify auth.rb