fixed authentication flag