demo server auth fixed