change the way auth is handled