lots of little auth changes... going from proof of concept to real deal