auth server updates