css auth improved