huge improvement implementing auth security