minor auth improvements