markdown2 replaced by mistune; auth fixes;