Authentication points to the wrong path