fixed auth steps