fix plain auth