fixed auth?