fix change visit, initialize auth if not authorized