fixed auth again