fixed auth api definition