authentication tweaks