auth tries + fixes