better auth checks etc