some changes to auth