fix auth  bug