improve auth for decentralised login
improve auth for decentralised login